The CRM built for credit repair professionals
Manage clients, credit reports, FCRA-compliant disputes, contracts, payments and appointments — all in one multi-tenant platform built for U.S. credit repair agencies and financial consultants.
Built around U.S. consumer protection law: Credit Repair Organizations Act (15 U.S.C. § 1679), Fair Credit Reporting Act, and Florida Credit Services Organizations Act.
Each consultant connects their Google account once. We request only calendar.events and calendar.freebusy — never event titles or attendee details. Disconnect anytime.
Everything a credit repair agency needs in one place
Stop juggling spreadsheets, PDFs, email threads and a dozen disconnected tools. Credit4Ever consolidates your entire workflow.
Client management & onboarding
Public registration links per agency, multi-stage onboarding (invited → registered → active), client portal with KYC document upload (encrypted at rest).
AI credit report parsing
Upload PDFs from MyFreeScoreNow, SmartCredit and other providers. Anthropic Claude extracts tradelines, inquiries, payment history and findings automatically.
FCRA-compliant disputes
Generate dispute letters tied to specific tradelines and bureaus. Track status, deadlines and reinsertions with full audit trail.
Contracts & e-signatures
Bilingual ES/EN contract PDFs with full CROA disclosures, digital signature capture, and automatic delivery via email.
Appointments & Google Calendar
Public booking pages per agency, per-agent availability, real-time Google Calendar sync, automatic Google Meet links, and editable email reminders.
Billing via Stripe Connect
Each agency connects their own Stripe account. Per-tenant invoices, recurring services, and PCI compliance handled by Stripe Checkout. We never store card data.
Built-in Google Calendar sync
Our appointment system integrates with Google Calendar so consultants can sync their availability in real time, prevent double-booking with personal events, and automatically generate Google Meet links for client sessions. The integration is opt-in per consultant — only staff who explicitly connect their Google account are affected.
OAuth scopes we request and why
We follow Google's minimum-permission principle. The app requests exactly the scopes it needs and nothing more. All Google user data is handled in accordance with the Google API Services User Data Policy, including the Limited Use requirements.
https://www.googleapis.com/auth/calendar.events— Create appointment events on the consultant's primary calendar (with Google Meet link) and remove them when an appointment is cancelled.https://www.googleapis.com/auth/calendar.freebusy— Read busy/free windows from the consultant's calendars to prevent double-booking against personal events. We never read event titles, descriptions or attendees.openid + userinfo.email + userinfo.profile— Identify which Google account is connected so the consultant can verify and manage their integration. No profile data is stored beyond email and basic identification.
See full disclosure in our Privacy Policy section 4.
Built for licensed professionals
Trust & security
We handle sensitive financial documents — Social Security numbers, government IDs, credit reports. Security is not a feature, it's the foundation.
AES-256-GCM at rest
Sensitive KYC documents (IDs, SSN proofs, address proofs) are encrypted with AES-256-GCM before being stored. Encryption keys are held outside the database.
Multi-tenant isolation
Every record carries a tenant_id. Postgres Row Level Security policies enforce isolation at the database layer — there is no shared state between agencies.
TLS 1.2+ in transit
All traffic is encrypted in transit. The platform runs on Vercel's edge network with HSTS, CSP enforcing, and modern TLS configuration.
Stripe-hosted payments
We never see card numbers. All payments go through Stripe Checkout. Webhooks verify signatures and reject cross-tenant replay attacks.
Multi-factor authentication
Optional TOTP-based MFA for all staff accounts. Available in account security settings, enforced via AAL2 once enabled.
Audit logging
Document access, login attempts (success / failed / blocked), and AI usage are logged with retention windows (90–365 days) for compliance review.
Get in touch
Questions about the platform, the OAuth integration, or compliance? We respond within one business day.
Mailing address
Florida Hitech Services Inc8711 SW 97th Ave
Miami, FL 33173
USA